Hydrocarbon flowline corrosion inhibitor overpressure protection

ABSTRACT

The disclosure describes hydrocarbon flowline corrosion inhibitor overpressure protection. Such a protection system includes a fluid flow pathway fluidically coupled to a corrosion inhibitor injection pump that injections corrosion inhibitor into a hydrocarbon carrying flowline. When the injection pump pressure exceeds a threshold flow pressure, the corrosion inhibitor is flowed through a first branch of the fluid flow pathway to relieve the excess pressure. The first branch is fluidically isolated from a second branch. When a rupture disc in the first branch fails, then the corrosion inhibitor is diverted to flow through the second branch and the first branch is isolated from the corrosion inhibitor flow.

CROSS-REFERENCE TO RELATED APPLICATIONS

This application is a continuation of and claims the benefit of U.S.application Ser. No. 16/225,571, filed on Dec. 19, 2018, the entirecontents of which are incorporated by reference in its entirety

TECHNICAL FIELD

This disclosure relates to managing flow of hydrocarbons throughflowlines that carry hydrocarbons between geographic locations.

BACKGROUND

Hydrocarbons (for example, petroleum, crude oil, natural gas orcombinations of them) that are entrapped in subterranean zones can beextracted from those zones and lifted to the surface, for example,through production wells. The extracted hydrocarbons can be flowed fromthe extraction site to processing plants (for example, gas-oilseparation plants) through flowlines. Processed hydrocarbons can furtherbe flowed from the processing plants to other geographic locations (forexample, delivery sites) using pipelines. Corrosive nature of certainhydrocarbons can induce corrosion in the flowlines that carry thosehydrocarbons.

SUMMARY

This specification describes technologies relating to hydrocarbonflowline corrosion inhibitor overpressure protection.

Certain aspects of the subject matter described here can be implementedas a corrosion inhibitor injection system. The system includes acorrosion inhibitor injection pump configured to flow a corrosioninhibitor into a flowline through which hydrocarbons are flowed. Thecorrosion inhibitor is configured to inhibit corrosion of the flowlinedue to the flow of the hydrocarbons. The corrosion inhibitor injectionpump is configured to flow the corrosion inhibitor at a pressure greaterthan a flowline pressure of the hydrocarbons flowing through theflowline. The system includes a fluid flow pathway fluidically coupledto the corrosion inhibitor injection pump. The corrosion inhibitorinjection pump is configured to flow the corrosion inhibitor through thefluid flow pathway when a corrosion inhibitor injection pump pressureexceeds a threshold flow pressure. The system includes a first rupturedisc fluidically coupled to the fluid flow pathway and to the corrosioninhibitor injection pump. The first rupture disc is configured to failin response to a pressure at which the corrosion inhibitor injectionpump flows the corrosion inhibitor into the flowline exceeding a firstrupture disc threshold pressure. The system includes a second rupturedisc fluidically coupled to the fluid flow pathway and to the corrosioninhibitor injection pump. The second rupture disc is isolated from flowof the corrosion inhibitor when the first rupture disc is fluidicallycoupled to the corrosion inhibitor injection pump. The system includes aprocessing system configured to perform operations. The operationsinclude determining that the first rupture disc has failed. In responseto determining that the first rupture disc has failed, the operationsinclude fluidically isolating the first rupture disc from the flow ofthe corrosion inhibitor, and fluidically coupling the second rupturedisc to the corrosion inhibitor injection pump.

Aspects of the disclosure combinable with any of the other aspectsinclude the following features. The system includes a first block valvefluidically coupled to the fluid flow pathway and the first rupturedisc. The first block valve is coupled to the processing system. Thefirst block valve is configured to be in an open state to permit thecorrosion inhibitor injection pump to flow the corrosion inhibitorthrough the fluid flow pathway. The processing system is configured tochange the first block valve from the open state to a closed state inresponse to determining that the first rupture disc has failed.

Aspects of the disclosure combinable with any of the other aspectsinclude the following features. The system includes a second block valvefluidically coupled to the fluid flow pathway and the second rupturedisc. The second block valve is coupled to the processing system. Thesecond block valve is configured to be in a closed state when the secondrupture disc is isolated from the flow of the corrosion inhibitor. Theprocessing system is configured to change the second block valve fromthe closed state to the open state in response to determining that thefirst rupture disc has failed.

Aspects of the disclosure combinable with any of the other aspectsinclude the following features. The processing system is connected to anisolation valve upstream of the flowline compared to the corrosioninhibitor injection system. In response to determining that the firstrupture disc has failed, the processing system is configured todetermine that a time between fluidically isolating the first rupturedisc from the flow of the corrosion inhibitor and fluidically couplingthe second rupture disc to the corrosion inhibitor injection pumpexceeds a time threshold. In response, the processing system isconfigured to transmit a closure signal to the isolation valve to causethe isolation valve to cease flow through the flowline.

Aspects of the disclosure combinable with any of the other aspectsinclude the following features. In response to determining that thefirst rupture disc has failed, the processing system is configured tocause the corrosion inhibitor injection pump to flow the corrosioninhibitor at a pressure less than the threshold pressure.

Aspects of the disclosure combinable with any of the other aspectsinclude the following features. The system includes an alarm systemcoupled to the processing system. The alarm system is configured totransmit one or more electronic alerts to one or more electronicterminals to communicate that the first rupture disc has failed.

Aspects of the disclosure combinable with any of the other aspectsinclude the following features. The system includes a first pressuresensor operatively coupled to the first rupture disc and the processingsystem. The first pressure sensor is configured to sense the pressure atwhich the corrosion inhibitor injection pump flows the corrosioninhibitor into the fluid flow pathway and to transmit the sensedpressure to the processing system.

Aspects of the disclosure combinable with any of the other aspectsinclude the following features. The system includes a second pressuresensor operatively coupled to the second rupture disc and the processingsystem. In response to the second pressure sensor being fluidicallycoupled to the corrosion inhibitor injection pump, the second pressuresensor is configured to sense a pressure at which the corrosioninhibitor injection pump flows the corrosion inhibitor into the fluidflow pathway and to transmit the sensed pressure to the processingsystem.

Aspects of the disclosure combinable with any of the other aspectsinclude the following features. The second rupture disc is configured tofail in response to the pressure at which the corrosion inhibitorinjection pump flows the corrosion inhibitor into the flowline exceedinga second rupture disc threshold pressure.

Aspects of the disclosure combinable with any of the other aspectsinclude the following features. The first pressure threshold and thesecond pressure threshold are different from each other.

Certain aspects of the subject matter described here can be implementedas a method. A corrosion inhibitor injection pump flows a corrosioninhibitor into a flowline through which hydrocarbons are flowed at apressure greater than a flowline pressure of the hydrocarbons flowingthrough the flowline. The corrosion inhibitor is configured to inhibitcorrosion of the flowline due to the flow of the hydrocarbons. Based ona failure of a rupture disc in a first branch of a flow pathway throughwhich the corrosion inhibitor flows, it is determined that a pressure atwhich the corrosion inhibitor is flowed into the flowline exceeds athreshold pressure. In response to determining that the pressure exceedsthe threshold pressure, flow of the corrosion inhibitor through thefirst branch is ceased and flow of the corrosion inhibitor is permittedin a second branch of the flow pathway which is fluidically isolatedfrom the first branch at a pressure less than the threshold pressure.One or more electronic alerts are transmitted to one or more electronicterminals to communicate that the pressure exceeds the thresholdpressure.

Aspects of the disclosure combinable with any of the other aspectsinclude the following features. To cease flow of the corrosion inhibitorin the first branch, a first block valve coupled to the first branch ischanged from an open state to a closed state.

Aspects of the disclosure combinable with any of the other aspectsinclude the following features. To permit the flow of the corrosioninhibitor in the second branch, a second block valve coupled to thesecond branch is changed from a closed state to an open state.

Aspects of the disclosure combinable with any of the other aspectsinclude the following features. It is determined that a time betweenceasing the flow of the corrosion inhibitor in the first branch andpermitting the flow of the corrosion inhibitor in the second branchexceeds a time threshold. In response, a closure signal is transmittedto an isolation valve upstream of the flowline to cause the isolationvalve to cease flow through the flowline.

Aspects of the disclosure combinable with any of the other aspectsinclude the following features. In response to determining that thepressure exceeds the threshold pressure, the corrosion inhibitorinjection pump is caused to flow the corrosion inhibitor at the pressureless than the threshold pressure.

Aspects of the disclosure combinable with any of the other aspectsinclude the following features. A pressure on the rupture disc in thefirst branch due to flow of the corrosion inhibitor is sensed, and it isdetermined that the rupture disc has failed in response to the pressuredownstream of the rupture disc.

Aspects of the disclosure combinable with any of the other aspectsinclude the following features. The rupture disc is a first rupturedisc. Pressure on a second rupture disc in the second branch due to flowof the corrosion inhibitor is sensed.

Certain aspects of the subject matter described here can be implementedas a corrosion inhibitor injection system. The system includes acorrosion inhibitor flow control system that includes a corrosioninhibitor injection pump, a first fluid flow pathway and a second fluidflow pathway. The corrosion inhibitor injection pump is configured toflow a corrosion inhibitor into a flowline through which hydrocarbonsare flowed. The corrosion inhibitor is configured to inhibit corrosionof the flowline due to the flow of the hydrocarbons. The corrosioninhibitor injection pump is configured to flow the corrosion inhibitorat a pressure greater than a flowline pressure of the hydrocarbonsflowing through the flowline. The first fluid flow pathway isfluidically coupled to the corrosion inhibitor injection pump. Thecorrosion inhibitor injection pump is configured to flow the corrosioninhibitor through the first fluid flow pathway when a corrosioninhibitor injection pump pressure exceeds a threshold flow pressure. Thefirst fluid flow pathway is fluidically coupled to a first rupture discconfigured to fail in response to a pressure of the flow of thecorrosion inhibitor in the first fluid pathway exceeding a firstpressure threshold. The second fluid flow pathway is fluidically coupledto the corrosion inhibitor injection pump. The corrosion inhibitorinjection pump is configured to flow the corrosion inhibitor through thesecond fluid flow pathway when the corrosion inhibitor injection pumppressure exceeds the threshold flow pressure. The second fluid flowpathway is fluidically coupled to a second rupture disc configured tofail in response to a pressure of the flow of the corrosion inhibitor inthe second fluid pathway exceeding a second pressure threshold The firstfluid pathway and the second fluid flow pathway are fluidically isolatedfrom each other such that when the first fluid pathway is open to flowthe corrosion inhibitor fluid to the flowline, the second fluid pathwayis closed to flow the corrosion inhibitor fluid to the flowline. Thesystem includes a processing system coupled to the corrosion inhibitorflow control system, the first fluid flow pathway and the second fluidflow pathway. The processing system is configured to determine a failureof the first rupture disc, cease the flow of the corrosion inhibitorthrough the first fluid pathway, and permit the flow of the corrosioninhibitor through the second fluid pathway.

Aspects of the disclosure combinable with any of the other aspectsinclude the following features. The processing system is configured todetermine that a time to cease the flow of the corrosion inhibitorthrough the first fluid pathway and to permit the flow of the corrosioninhibitor through the second fluid pathway exceeds a time threshold, andin response to determining that the time exceeds the time threshold,transmitting a closure signal to cease flow through the flowline.

The details of one or more implementations of the subject matterdescribed in this specification are set forth in the accompanyingdrawings and the description that follows. Other features, aspects, andadvantages of the subject matter will become apparent from thedescription, the drawings, and the claims.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a schematic diagram of an overpressure protection of ahydrocarbon corrosion inhibitor injection system.

FIG. 2 is a flowchart of an example of a process of operating thehydrocarbon corrosion inhibitor injection system of FIG. 1.

Like reference numbers and designations in the various drawings indicatelike elements.

DETAILED DESCRIPTION

Oil and gas flowlines are often protected by corrosion inhibitors thatare injected downstream of production wellheads. Different corrosioninhibitors serve different functions, for example, oxygen scavenging,neutralizing and establishing a physical barrier at the internal surfaceof the flowlines to mitigate internal corrosion, to name a few. Thisdisclosure describes a corrosion inhibitor injection overpressureprotection system for a hydrocarbon flowline. As described later, thesystem includes rupture discs in the flow paths of the corrosioninhibitors to the flowline, to protect the corrosion inhibitor pipingsystem from overpressure. The rupture discs are connected to a logicsolver which, upon receiving a signal indicating failure of a rupturedisc, can control operations such as diverting flow of the corrosioninhibitor into an alternative flow path, modifying operation of thecorrosion inhibitor injection pumps, triggering flowline isolationvalves or other operations. By flowing the corrosion inhibitor throughthe alternative overpressure protection path, repair or replacement ofthe failed rupture disc can be implemented without ceasing the flow ofthe corrosion inhibitor into the flowline, for long period. In thismanner, the technical operation of inhibitor corrosion overpressureprotection system for flowlines can be improved and optimized.Implementing the techniques described in this disclosure can negate theneed for periodic maintenance or replacement of the conventional springloaded relief valves, thereby decreasing maintenance cost and man-hoursfor the same since the wellheads and inhibitor injection systems aretypically scattered in field remote areas yielding high transportation,maintenance and man-hour costs.

FIG. 1 is a schematic diagram of an overpressure protection of ahydrocarbon corrosion inhibitor injection system 100. The system 100includes one or more corrosion inhibitor injection pumps (for example, afirst pump 102 a, a second pump 102 b), each configured to flow acorrosion inhibitor into a flowline 104 through which hydrocarbons areflowed. The corrosion inhibitor is configured to inhibit corrosion ofthe flowline 104 due to the flow of the corrosive hydrocarbons. The pumpis configured to flow the corrosion inhibitor at a pressure greater thana flowline pressure of the hydrocarbons flowing through the flowline104. By doing so, the pump can overcome the flowline pressure and injectthe corrosion inhibitor into the flowline. The flowline pressure isvariable depending on the production demand. Corrosion inhibitorpressure can be higher than flowline pressure, for example, by at least4-10 pounds per square inch (psi). The system 100 includes a corrosioninhibitor overpressure protection system. When a pressure of thecorrosion inhibitor injection pumps exceeds a threshold pressure (thatis, threshold flow pressure or threshold corrosion fluid flow pressure),then the overpressure protection system diverts excess pressure greaterthan the threshold pressure to a blowdown, thereby relieving the excesspressure without overpressurizing the system 100.

A fluid flow pathway 106 is fluidically coupled to each of the corrosioninhibitor injection pumps and the corrosion inhibitor overpressureprotection system. The pumps are configured to flow the corrosioninhibitor into the flowline 104 and through the fluid flow pathway 106.In the context of this disclosure, the fluid flow pathway includes oneor more hollow pipes, pipe joints and associated flow components (seals,valves, and the like) interconnecting the various components describedin this disclosure. For example, one or more pipes or a network of pipesfluidically couple the pumps to the flowline 104. The pipes areconfigured to flow the corrosion inhibitor at pressures delivered by theone or more pumps.

A first rupture disc 108 is fluidically coupled to the fluid flowpathway 106 and to the one or more corrosion inhibitor injection pumps.The first rupture disc 108 is configured to fail (that is, burst) if apressure (first rupture disc threshold pressure) at which the corrosioninhibitor injection pump flows the corrosion inhibitor into the pathway106 exceeds a threshold pressure. A rupture disc is an overpressurecontrol member that includes a membrane that can withstand a pressure upto the threshold pressure. If the pressure exceeds the thresholdpressure, the membrane fails, that is, bursts. The pressure experiencedby the rupture disc can increase until the threshold pressure isreached. Once the membrane fails, the pressure experienced by therupture disc decreases rapidly indicating failure. FIG. 1 shows thefirst rupture disc 108 fluidically coupled to the fluid flow pathway 106to sense a pressure of flow of the corrosion inhibitor through the fluidflow pathway 106. In some implementations, a first pressure sensor 122can be operatively coupled to the first rupture disc 108 and to a logicsolver 112 described later. The first pressure sensor 122 can sense apressure experienced downstream of the first rupture disc 108 andtransmit the sensed pressure to the logic solver 112.

A second rupture disc 110 is fluidically coupled to the fluid flowpathway 106 and to the one or more corrosion inhibitor injection pumps.The second rupture disc 110 can be similar in construction and operationas the first rupture disc 108 and be associated with a second rupturedisc threshold pressure at which the second rupture disc 110 isconfigured to fail (that is, burst). The threshold pressures for the tworupture discs can be the same or can be different. In someimplementations, a second pressure sensor 124 can be operatively coupledto the second rupture disc 110 and to the logic solver 112. The secondpressure sensor 124 can sense a pressure downstream of the secondrupture disc 110 and transmit the sensed pressure to the logic solver112.

The second rupture disc 110 is fluidically isolated from the flow of thecorrosion inhibitor when the first rupture disc 108 is fluidicallycoupled to the corrosion inhibitor injection pumps. For example, thefluid flow pathway 106 can be divided into two branches with the firstrupture disc 108 being in a first branch and the second rupture disc 110being in a second branch. The two branches are fluidically isolatedduring operation in that, at any given time, the pump can flow thecorrosion inhibitor through either the first branch or the second branchbut not both branches. Because each rupture disc is in one of thebranches, at any given time, flow of the corrosion inhibitor applies apressure on only one of the two rupture discs.

In some implementations, the first branch into which the fluid flowpathway 106 is divided can be a first flow pathway that includes thefirst rupture disc 108 and a first block valve 114 that is fluidicallycoupled to the first rupture disc 108. The first block valve 114 can bein an open state to permit the one or more corrosion inhibitor pumps toflow the corrosion inhibitor through the first fluid flow pathway. Inresponse to a signal, the first block valve 114 can be changed to aclosed state in which the first block valve 114 can prevent the one ormore corrosion inhibitor pumps from flowing the corrosion inhibitorthrough the first fluid flow pathway. Similarly, the second branch intowhich the fluid flow pathway 106 is divided can be a second flow pathwaythat includes the second rupture disc 108 and a second block valve 116that is fluidically coupled to the second rupture disc 110. The secondblock valve 116 can be in an open state to permit the one or morecorrosion inhibitor pumps to flow the corrosion inhibitor through thesecond fluid flow pathway. In response to a signal, the second blockvalve 116 can be changed to a closed state in which the second blockvalve 116 can prevent the one or more corrosion inhibitor pumps fromflowing the corrosion inhibitor through the second fluid flow pathway.At any given time, either the first block valve 114 or the second blockvalve 116 is open and the other is closed such that the corrosioninhibitor fluid can be pumped through either the first flow pathway orthe second flow pathway but not both.

The logic solver 112 is connected to the one or more corrosion inhibitorinjection pumps, the fluid flow pathway 106 and the fluidic componentsin the pathway. In some implementations, the logic solver 112 is aprocessing system that can be implemented as one or more computersystems, each including a computer-readable medium (for example, anon-transitory computer-readable medium) and one or more processors eachstoring computer instructions executable by the computer-readable mediumto perform operations described in this disclosure. Alternatively or inaddition, the logic solver 112 can be implemented as processingcircuitry. In an example scenario in which the first fluid flow pathwayis open to flow of the corrosion inhibitor and the second fluid flowpathway is closed, the logic solver 112 can determine that the firstrupture disc 108 has failed. In response, the logic solver 112 canfluidically isolate the first fluid flow pathway from the flow of thecorrosion inhibitor and fluidically permit the flow instead and onlythrough the second fluid flow pathway.

The logic solver 112 can automatically and without user interventionperform multiple operations to manage the flow of the corrosioninhibitor from the one or more pumps into the flowline 104. For example,a failure of the first rupture disc 108 indicates that a pressure in thecorrosion inhibitor injection system 100 has exceeded a thresholdpressure (for example, a safe pressure threshold). If the corrosioninhibitor continues to flow even after the first rupture disc 108 fails,then the corrosion injection system 100 can experience an improperoperation due to the drop in pump discharge pressure and inability toinject the inhibitor to the flowlines. To prevent such a situation, thelogic solver 112 can prevent flow through the first fluid pathway (forexample, by changing the first block valve 114 to a closed state) andcan permit flow through the second fluid pathway (for example, bychanging the second block valve 116 to an open state).

In some implementations, the logic solver 112 can be coupled to an alarmsystem 120 that can transmit one or more electronic alerts to one ormore electronic terminals (not shown) to communicate that the firstrupture disc 108 has failed. For example, the alarm system 120 caninclude operational terminals monitored by operations personnel ormaintenance crews or both. The alarm system 120 can turn on audible orvisual alarms or transmit messages (for example, electronic messages)communicating the failure of the first rupture disc 108. In someimplementations, the alarm system 12 can turn on the audible or visualalarms or transmit messages (or combinations of them) in response toirresponsive or improper actions by the block valves or other systemfaults during operation, due to overdue system functional testing andchecks for the components including the logic solver 112, pressuretransmitters or other system components, or combinations of them. Insome implementations, the logic solver 112 can turn off the corrosioninhibitor pumps to protect the corrosion inhibitor piping fromoverpressure when these circumstances arise. An alarm signal may also besent when the pumps are turned off due to such circumstances.

In some implementations, the logic solver 112 can shut down flow of thehydrocarbon through the flowline 104, in case the corrosion inhibitorinjection system is inoperative due to malfunction of overpressureprotection system. For example, the hydrocarbons flowed through theflowline 104 can be extracted from a wellbore (not shown) and flowedthrough a wellhead shown schematically in FIG. 1. An isolation valve 118can be connected to the wellhead and upstream of the flowline 104compared to the corrosion inhibitor injection system 100. In an openstate, the isolation valve 118 can permit hydrocarbon flow through theflowline 104. In a closed state, the isolation valve 118 can prevent orcease hydrocarbon flow through the flowline 104. Upon determining thatthe first rupture disc 108 has failed, the logic solver 112 can start aclock (not shown) to measure a time to switch corrosion inhibitor flowfrom the first fluid flow pathway to the second fluid flow pathway asdescribed earlier. If the time to switch is small, then no significantinterruption to the injection of the corrosion inhibitor into theflowline 104 will occur due reverting to the normal corrosion inhibitoroperation pressure within a safe reasonable time to protect the flowlineby inhibitor. However, if the time to switch flow is large, then a riskof the corrosion in flowline situation increases. In someimplementations, the logic solver 112 can transmit a signal to theisolation valve 118 to change from the open state to the closed state ifthe measured time to switch is greater than a threshold time. When thisvalve closure signal is transmitted, the solver also turns off thecorrosion inhibitor pumps. The threshold time can be a value stored in acomputer-readable memory against which the logic solver 112 can comparethe measured time. The threshold time can be selected based, in part, ontime limits that the flowline 104 without inhibitor injected canwithstand.

In some implementations, the logic solver 112 can modify an operation ofthe corrosion inhibitor injection pumps. For example, the failure of thefirst rupture disc 108 is an indication that the pressure in the firstfluid flow pathway has exceeded a first pressure threshold. One reasonfor the failure, therefore, can be a speed of the pumps. In suchinstances, the logic solver 112 can transmit an instruction to the oneor more pumps to decrease a rotational speed of the impeller resultingin a decrease in the pressure in the first fluid flow pathway. In someimplementations, the logic solver 112 can transmit an instruction toturn off the one or more pumps in response to system malfunctions, asdescribed earlier.

The logic solver 112 can implement the operations described above ineach of the first fluid flow pathway or the second fluid flow pathway.For example, as described above, if the first rupture disc 108 fails,then the logic solver 112 can close the first block valve 114 to ceaseflow through the first fluid flow pathway and open the second blockvalve 116 to permit flow instead through the second fluid flow pathway.Operations personnel or maintenance crew can repair or replace the firstrupture disc 108. In some instances, upon the first rupture disc 108being repaired or replaced, the logic solver 112 can automatically andwithout user intervention close the second block valve 116 to cease flowthrough the second fluid flow pathway and open the first block valve 114to permit flow instead through the first fluid flow pathway.Alternatively, the logic solver 112 can switch back to the first fluidflow pathway from the second fluid flow pathway in response to userinput. In another alternative implementation, the logic solver 112 canautomatically and without user intervention switch back to the firstfluid flow pathway if the second rupture disc 110 fails.

The first block valve 114 and the second block valve 116 can be upstreamvalves that are upstream of the first rupture disc 108 and the secondrupture disc 110, respectively. In some implementations, the corrosioninhibitor injection overpressure protection system 100 can include ablock valve 128 and a block valve 126 in the first fluid flow pathwayand the second fluid flow pathway, respectively, that are downstream ofthe first disc 108 and the second disc 110, respectively. Each of theblock valve 128 and the block valve 126 can be in the same state as thefirst block valve 114 and the second block valve 116, respectively.Having two block valves in a fluid flow pathway branch instead of onecan improve the prevention or permission of flow of the corrosioninhibitor through that fluid flow pathway branch to allow for isolationand rupture disc replacement by maintenance crew. In addition, thecorrosion inhibitor injection system 100 can include multiple vent ordrain valves (for example, vent or drain valves 130 a, 130 b, 130 c, 130d), each of which can be used to reduce the contained pressure and ventor drain the contained fluid in a fluid flow pathway branch to allow forrupture disc replacement by maintenance crew.

FIG. 2 is a flowchart of an example of a process 200 of operating thehydrocarbon corrosion inhibitor injection overpressure protection systemof FIG. 1. Certain portions of the process 200 can be implementedautomatically and without user intervention by a processing system, forexample, the logic solver 112. Certain portions of the process 200 canbe implemented by components of a corrosion inhibitor injectionoverpressure protection system, for example, system 100. Certainportions of the process 200 can be implemented manually. At 202,corrosion inhibitor is flowed through a first fluid flow pathway. Forexample, in response to a corrosion injection pump pressure beinggreater than a threshold flow pressure, some of the corrosion inhibitorcan be flowed through the overpressure protection system (for example,the first fluid pathway 106) to relieve the excess pressure. At 204, itis determined that a first rupture disc in the first fluid flow pathwayhas failed. For example, the logic solver 112 can determine that thefirst rupture disc 108 has failed based on pressure sensed by thepressure sensor 122 connected to the first rupture disc 108. At 206,flow through the first fluid flow pathway is ceased in response todetermining that the first rupture disc has failed. For example, thelogic solver 112 can close the first block valve 114 upon determiningthat the first rupture disc 108 has failed based on received pressuremeasurements from the pressure sensor 122. At 208, flow through thesecond fluid flow pathway is permitted. For example, upon closing thefirst block valve 114, the logic solver 112 can open the second blockvalve 116 to permit flow of the corrosion inhibitor through the secondfluid flow pathway to relieve the excess pressure described earlier. At210, the first rupture disc can be repaired or replaced. For example,operations personnel or maintenance crew can repair or replace the firstrupture disc 108 while the corrosion inhibitor injection overpressureprotection continues uninterrupted through the second fluid flowpathway. At 212, it is determined that a second rupture disc in thesecond fluid flow pathway has failed. For example, the logic solver 112can determine that the second rupture disc 110 has failed based onpressure sensed by the pressure sensor 124 connected to the secondrupture disc 110. At 214, flow through the second fluid flow pathway isceased in response to determining that the second rupture disc hasfailed. For example, the logic solver 112 can close the second blockvalve 116 upon determining that the second rupture disc 110 has failedbased on received pressure measurements from the pressure sensor 124. At216, flow through the first fluid flow pathway is permitted. Forexample, upon closing the second block valve 116, the logic solver 112can open the first block valve 114 to permit flow of the corrosioninhibitor through the second fluid flow pathway to relieve the excesspressure described earlier. At 218, the second rupture disc can berepaired or replaced. For example, operations personnel or maintenancecrew can repair or replace the second rupture disc 110 while thecorrosion inhibitor injection overpressure protection continuesuninterrupted through the second fluid flow pathway.

The logic solver 112 can be a component that is connected to a singlecorrosion inhibitor injection overpressure protection system 100 asdescribed earlier or can be shared by multiple similar injectionsystems. Each injection system can be implemented to inject a corrosioninhibitor or other fluids into the flowline. For each injection system,the logic solver 112 can store and execute dedicated computerinstructions similar to the instructions for the system 100 describedearlier.

Thus, particular implementations of the subject matter have beendescribed. Other implementations are within the scope of the followingclaims.

1-19. (canceled)
 20. A system comprising: a pump configured to flow afluid into a flowline through which hydrocarbons are flowed, the pumpconfigured to flow the fluid at a pressure greater than a flowlinepressure of the hydrocarbons flowing through the flowline; a firstrupture disc and a second rupture disc, each fluidically coupled to theflowline and to the pump, and each configured to fail in response to apressure at which the pump flows the fluid into the flowline exceeding arespective threshold pressure, wherein the second rupture disc isisolated from flow of the fluid when the first rupture disc isfluidically coupled to the pump; and a processing system configured toperform operations comprising: determining that the first rupture dischas failed; in response to determining that the first rupture disc hasfailed: fluidically isolating the first rupture disc from the flow ofthe fluid; and fluidically coupling the second rupture disc to the pump.21. The system of claim 20, further comprising: a first block valvefluidically coupled to the flowline and the first rupture disc, thefirst block valve coupled to the processing system, the first blockvalve configured to be in an open state to permit the pump to flow thefluid into the flowline, wherein the processing system is configured tochange the first block valve from the open state to a closed state inresponse to determining that the first rupture disc has failed.
 22. Thesystem of claim 21, further comprising: a second block valve fluidicallycoupled to the flowline and the second rupture disc, the second blockvalve coupled to the processing system, the second block valveconfigured to be in an open state when the second rupture disc isisolated from the flow of the fluid, wherein the processing system isconfigured to change the second block valve from the closed state to theopen state in response to determining that the first rupture disc hasfailed.
 23. The system of claim 20, wherein the processing system isconnected to an isolation valve upstream of the flowline compared to thesystem, wherein, in response to determining that the first rupture dischas failed, the processing system is configured to perform operationscomprising: determining that a time between fluidically isolating thefirst rupture disc from a flow of the fluid and fluidically coupling thesecond rupture disc to the pump exceeds a time threshold; and inresponse to determining that the time exceeds the time threshold,transmitting a closure signal to the isolation valve to cause theisolation valve to cease flow through the flowline.
 24. The system ofclaim 20, wherein, in response to determining that the first rupturedisc has failed, the processing system is configured to cause the pumpto flow the fluid at a pressure less than a first rupture disc thresholdpressure.
 25. The system of claim 20, further comprising an alarm systemcoupled to the processing system, the alarm system configured totransmit one or more electronic alerts to one or more electronicterminals to communicate that the first rupture disc has failed.
 26. Thesystem of claim 20, further comprising a first pressure sensoroperatively coupled to the first rupture disc and the processing system,the first pressure sensor configured to sense the pressure at which thepump flows the fluid into the flowline and to transmit a first sensedpressure to the processing system.
 27. The system of claim 26, furthercomprising a second pressure sensor operatively coupled to the secondrupture disc and the processing system, wherein, in response to thesecond pressure sensor being fluidically coupled to the pump, the secondpressure sensor is configured to sense a pressure at which the pumpflows the fluid into the flowline and to transmit a second sensedpressure to the processing system.
 28. The system of claim 20, whereinthe second rupture disc is configured to fail in response to thepressure at which the pump flows the fluid into the flowline exceeding asecond rupture disc threshold pressure.
 29. The system of claim 20,wherein a first rupture disc pressure threshold and a second rupturedisc pressure threshold are different from each other.
 30. A systemcomprising: a flow control system comprising: a pump configured to flowa fluid into a flowline through which hydrocarbons are flowed, the pumpconfigured to flow the fluid at a pressure greater than a flowlinepressure of the hydrocarbons flowing through the flowline; a firstrupture disc and a second rupture disc, each fluidically coupled to thepump, the pump configured to flow the fluid through the first rupturedisc when a pump pressure exceeds a threshold flow pressure, and eachconfigured to fail in response to a pressure of the flow of the fluidexceeding a respective pressure threshold, wherein the first rupturedisc and the second rupture disc are fluidically isolated from eachother such that when the first rupture disc is open to flow, the secondrupture disc is closed to flow; and a processing system coupled to theflow control system, the first rupture disc and the second rupture disc,the processing system configured to: determine a failure of the firstrupture disc, cease the flow of the fluid through the first rupturedisc, and permit the flow of the fluid through the second rupture disc.31. The system of claim 30, wherein the processing system is configuredto: determine that a time to cease a flow of the fluid through the firstrupture disc and to permit the flow of the fluid through the secondrupture disc exceeds a time threshold; and in response to determiningthat the time exceeds the time threshold, transmitting a closure signalto cease flow through the second rupture disc.
 32. The system of claim31, wherein the first rupture disc is fluidically coupled to the pump,wherein the second rupture disc is fluidically coupled to the pump, andwherein the second rupture disc is isolated from flow of the fluid whenthe first rupture disc is fluidically coupled to the pump.